250 matches found
D-Link DNS-320 - Unauthenticated Remote Code Execution
D-Link DNS-320 FW v2.06B01 Revision Ax is susceptible to a command injection vulnerability in a systemmgr.cgi component. The component does not successfully sanitize the value of the HTTP parameters fntpserver, which in turn leads to arbitrary command execution. id: CVE-2020-25506 info: name:...
Adobe ColdFusion - Access Control Bypass
An attacker is able to access every CFM and CFC endpoint within the ColdFusion Administrator path /CFIDE/, of which there are 437 CFM files and 96 CFC files in a ColdFusion 2021 Update 6 install. id: CVE-2023-29298 info: name: Adobe ColdFusion - Access Control Bypass author:...
Embedthis GoAhead <3.6.5 - Remote Code Execution
description: Embedthis GoAhead before 3.6.5 allows remote code execution if CGI is enabled and a CGI program is dynamically linked. id: CVE-2017-17562 info: name: Embedthis GoAhead 3.6.5 - Remote Code Execution author: geeknik severity: high description: | description: Embedthis GoAhead before...
Ruckus Wireless Admin - Remote Code Execution
Ruckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthenticated HTTP GET Request. id: CVE-2023-25717 info: name: Ruckus Wireless Admin - Remote Code Execution author: parthmalhotra,pdresearch severity: critical description: | Ruckus Wireless Admin through 10.4 allows Remote...
React-2-Shell
Questo è uno strumento di sfruttamento della sicurezza mirato a CVE-2025-55182. Sfrutta una vulnerabilità di Remote Code Execution RCE nei React Server Components 🔥 CVE-2025-55182 Background CVE-2025-55182 ampiamente indicato anche come “React2Shell” è una vulnerabilità critica di remote code...
CVE-2025-8088-WinRAR-Zero-Day-Path-Traversal
CVE-2025-8088: Path Traversal Zero-Day di WinRAR — Da Zero a Pwn 🗿 Introduzione – Il “Vecchio Amico” Appena Colto in Fallo WinRAR — il classico polveroso che tutti hanno installato ma nessuno aggiorna — è stato appena colpito da un zero-day ad alta gravità : CVE-2025-8088. Gravità: CVSS v3.1 → 8....
CVE-2026-50522
🛡️ CVE-2026-50522 — Untersuchung zur Microsoft-SharePoint-RCE-Sicherheitslücke Kritische SharePoint-Deserialisierungsschwachstelle unter aktiver Ausnutzung Erstellt von Pratik Chhetri Berichtsdatum: 2026-07-27 📌 Kurzüberblick...
Adobe ColdFusion - Pre-Auth Remote Code Execution
Adobe ColdFusion versions 2018u16 and earlier, 2021u6 and earlier and 2023.0.0.330468 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user interaction. id: CVE-2023-29300 info:...
Microsoft SharePoint Server - Remote Code Execution (ToolShell)
Deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an unauthorized attacker to execute code over a network. This vulnerability is part of the ToolShell exploit chain and when combined with CVE-2025-53771 authentication bypass, enables unauthenticated remote code...
Microsoft Open Management Infrastructure - Remote Code Execution
Microsoft Open Management Infrastructure is susceptible to remote code execution OMIGOD. id: CVE-2021-38647 info: name: Microsoft Open Management Infrastructure - Remote Code Execution author: daffainfo,xstp severity: critical description: Microsoft Open Management Infrastructure is susceptible t...
Spring Cloud - Remote Code Execution
Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions are susceptible to remote code execution vulnerabilities. When using routing functionality it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in remote code execution and...
CVE-2025-10164
creationtimestamp| type| source ---|---|--- 2026-08-23 11:00:35+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5775be7d-1a29-41ee-bdff-b6026e93023f 2026-08-24 01:11:00+00:00| exploited|...
CVE-2021-27691
creationtimestamp| type| source ---|---|--- 2026-08-23 10:15:05+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2026-08-22 2026-08-23 11:00:35+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/39ee7ca1-fe23-494e-8a9e-ae5f349620a0...
MINI-M4QR-79X8-XHXX
Bulletin has no description...
ghe-push-option-rce-scanner
CVE-2026-3854 — RCE no GitHub Enterprise Server via Injeção de Opção de Push Visão Geral Neutralização inadequada de valores de opções de push no GHE. Atacante com acesso de push obtém RCE na instância. Campo| Valor ---|--- CVE| CVE-2026-3854 Gravidade| CRÍTICA Produto| GitHub Enterprise Server...
beyondtrust-rce-scanner
CVE-2026-1731 — BeyondTrust Remote Support & PRA Pre-auth RCE Panoramica RCE critica pre-autenticazione in BeyondTrust Remote Support e Privileged Remote Access. Un attaccante remoto non autenticato può eseguire comandi del sistema operativo...
ForgeRock OpenAM <7.0 - Remote Code Execution
ForgeRock AM server before 7.0 has a Java deserialization vulnerability in the jato.pageSession parameter on multiple pages. The exploitation does not require authentication, and remote code execution can be triggered by sending a single crafted /ccversion/ request to the server. The vulnerabilit...
VulnCheck KEV: CVE-2026-69836
Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized attacker to execute code over a network...
Critical macOS, SharePoint, vCenter, and Microsoft IKE Flaws Under Active Exploitation
The U.S. Cybersecurity and Infrastructure Security Agency CISA on Tuesday added four critical vulnerabilities to its Known Exploited Vulnerabilities KEV catalog, stating they are being exploited in the wild. The shortcomings added to the KEV catalog are listed below - CVE-2026-65400 CVSS score: 9...